Ransomware group profile · #88 by claimed victims
Lv ransomware
LV ransomware group main message: "Here are companies which didn't meet consumer data protection obligations. They rejected to fix their mistakes, they rejected to protect this data in the case when they could and had to ptotect it. These companies prefered to sell their private information, their employees' and customers' personal data". Security researchers claim that the LV group is utilizing the REvil ransomware group malware. The LV group claim to have compromised the corporate network of Groupe Reorev.
Victimology
Who Lv claims to have breached, from 63 leak-site posts recorded by VULONE.
Claims per month last 12 months
Top sectors
Top countries
Latest claimed victims 12 most recent
| Victim | Sector | Country | Claimed |
|---|---|---|---|
| GLEN DIMPLEX GROUP UNITS WERE HACKED (DEFOND, DEFONDTECH AND OTHER). MORE THAN 1 glen dimplex group units were hacked (defond, defondtech and other). more than 1tb data wa | Manufacturing | — | 27 Nov 2022 |
| UNITEDAUTO.MX HAVE BEEN HACKED DUE TO MULTIPLE NETWORK VULNERABILITIES. MORE THA unitedauto.mx have been hacked due to multiple network vulnerabilities. more than 2tb of p | Manufacturing | — | 19 Nov 2022 |
| THEW ASSOCIATES HACKED. MORE THEN 50 GB SENSETIVE DATA LEAKED. thew associates hacked. more then 50 gb sensetive data leaked. | Professional Services | — | 14 Nov 2022 |
| BRAZILIAN PET FOODS | Agriculture and Food Production | — | 11 Nov 2022 |
| LAW OFFICES OF JOHN T ORCUTT WAS HACKED. MORE THEN 2TB SENSETIVE DATA LEAKED. law offices of john t orcutt was hacked. more then 2tb sensetive data leaked. | Professional Services | — | 9 Nov 2022 |
| CONSUMAX.COM.AR - WAS HACKED AND MORE THEN 2TB SENSETIVE DATA LEAKED consumax.com.ar - was hacked and more then 2tb sensetive data leaked | Retail & E-Commerce | — | 3 Nov 2022 |
| Saint Jean Industries - MORE THEN 1.5 TB DATA LEAKED saint jean industries - more then 1.5 tb data leaked | Manufacturing | — | 2 Nov 2022 |
| AWESOME-DENTAL.COM - HACKED AND MORE THEN 100GB LEAKED awesome-dental.com - hacked and more then 100gb leaked | Retail & E-Commerce | — | 2 Nov 2022 |
| WICKERSHAMCONSTRUCTION.COM - HACKED AND MORE THEN 1000GB DATA LEAKED! wickershamconstruction.com - hacked and more then 1000gb data leaked! | Manufacturing | — | 2 Nov 2022 |
| PARAMOUNT ENTERPRISE INTERNATIONAL HACKED AND MORE THEN 1.5 TB DATA LEAKED paramount enterprise international hacked and more then 1.5 tb data leaked | Professional Services | — | 2 Nov 2022 |
| THEHURSTGROUP.CO.UK - HACKED AND MORE THEN 2000GB SENSITIVE DATA LEAKED thehurstgroup.co.uk - hacked and more then 2000gb sensitive data leaked | Professional Services | — | 2 Nov 2022 |
| ROUGIER HACKED. 1 TB SENSITIVE DATA LEAKED rougier hacked. 1 tb sensitive data leaked | Agriculture and Food Production | — | 2 Nov 2022 |
All 63 Lv victims, searchable
Full victim list with claim posts, domains, timing and exports, plus the negotiation chats and leak-site screenshots VULONE archives for this crew.
Tactics, techniques and procedures
ATT&CK technique mapping for Lv is in progress. Victimology, infrastructure status and leak-site tracking are live above.
Indicators, detections and the full playbook
Hashes, C2 addresses, onion services, Sigma and YARA detections per technique, and the negotiation transcripts are available to signed-in analysts.
Frequently asked
Is Lv ransomware still active?
How many victims has Lv claimed?
Which industries does Lv target?
Which countries are most affected by Lv?
Where does VULONE get Lv victim data?
VULONE research mentioning Lv
Other ransomware groups
Qilin
Lockbit3
Akira
ClopVictim claims are collected from leak sites and enrichment partners (ransomware.live, RansomLook) and represent the group's own assertions, not confirmed breaches. Profile last updated 16 September 2026. Questions or corrections: [email protected].
